I'm not sure if this has been reported yet but you can do the same thing with the ftp server. Don't know if they have a patch but basically it's the same exploit as the one your talking about.